The EU's new Cyber Resilience Act is about to tell us how to code

Re:The EU's new Cyber Resilience Act is about to tell us how... by Scandiravian on Friday March 03, 2023 @04:15PM (#35015102)

I agree that the authors points are important - can't see that I've said otherwise anywhere

Looking at the history of GDPR fines, big corporations have been fined large amounts, small companies have gotten warnings

Given that legal precedence I think saying that open-source maintainers risk 15M euro fines is blowing things out of proportion

[ Parent | on HN ]

Re:The EU's new Cyber Resilience Act is about to tell us how... by Attrecomet on Monday March 06, 2023 @03:29AM (#35038743)

European law is a lot less precedence driven that common law (though it still is a bit), so why shouldn't we demand clear rules instead of dangerous vagueness?

And for a small open source project, a 500€ fine is enough to make development and publication unattractive, a percentage of a devs yearly income is painful, and tens of thousands of Euros would be dangerous to the long-term financial well-being of the developers. Even if the fines are a lot lower than 15M€, this proposal stays shit as written.

[ Parent | on HN ]